{"vulnerability": "CVE-2026-1530", "sightings": [{"uuid": "d04ca50e-2888-4d75-9f96-1ce87ec73ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1530", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdu7eoe4ke27", "content": "", "creation_timestamp": "2026-02-02T06:21:29.071723Z"}, {"uuid": "18a828a8-5f66-411f-b45a-78f44594858c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy", "content": "Django CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, and CVE-2026-15920", "creation_timestamp": "2026-08-04T16:29:42.247216Z"}, {"uuid": "92af7a49-534d-497f-b0de-d8c1a29479c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msbrxt7kt622", "content": "GeoDjango\u306f\u3001\u7a7a\u9593\u30eb\u30c3\u30af\u30a2\u30c3\u30d7\u3067\u4e0d\u6b63\u306a\u5165\u529b\u3092\u51e6\u7406\u3059\u308b\u969b\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u307f\u3001\u5916\u90e8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u767a\u751f\u3055\u305b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u7e4b\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002GeometryField\u2026\nCVE-2026-15307 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-04T19:51:38.007228Z"}, {"uuid": "8b2161c0-880f-476e-b018-ef89d0ba15d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mschtyhb6f2n", "content": "A high-severity Django vulnerability, CVE-2026-15307, can enable remote code execution through spatial lookups. Update to Django 6.0.8 or 5.2.17 now.\n\n#Django #DjangoSecurity #CVE202615307 #RCE #RemoteCodeExecution #Vulnerability #Python #WebSecurity #InfoSec #CyberSecurity", "creation_timestamp": "2026-08-05T02:23:12.479350Z"}, {"uuid": "c36580b8-5231-4723-9ebc-ba5d64cbd200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mscpueke5k2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-18577: 32 interactions\nCVE-2026-58048: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58048: 15 interactions\nCVE-2026-18574: 8 interactions\nCVE-2026-15307: 6 interactions\n", "creation_timestamp": "2026-08-05T04:46:34.989582Z"}, {"uuid": "b47e67b4-dad4-46a8-aafe-b5da05be9e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mscu3e5ym62o", "content": "CVE-2026-15307 - python-django\nA critical vulnerability in Debian Linux allows an attacker to execute malicious code on a system without being authenticated. This could potentially allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pythondjango #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-05T06:02:03.724695Z"}, {"uuid": "f93d662a-fd2a-425b-8766-905915d96a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msdi5mois527", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-15308 impacts python in 5 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/654\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-05T12:01:16.576604Z"}, {"uuid": "4e2e3a66-9539-4a5a-9efd-3c804e32f230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-05T15:00:06.113276Z"}, {"uuid": "65ac5574-5613-4269-9a30-c2a0ec07e2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-06T00:00:33.871682Z"}, {"uuid": "4c62a5eb-23ff-4700-b291-880bac82e44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqa7dgwyrk24", "content": "[oss-security][CVE-2026-15308] Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations", "creation_timestamp": "2026-07-09T17:55:06.385568Z"}, {"uuid": "ed36a1e1-57e4-4e93-bbbb-58d673d64d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqac5dfb5325", "content": "CVE-2026-15308 - Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations\nCVE ID : CVE-2026-15308\n \n Published : July 9, 2026, 5:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : The incremental HTML parser (html.parser.HTMLParser) ...", "creation_timestamp": "2026-07-09T18:45:19.853092Z"}, {"uuid": "dd892562-dfd6-4cdb-baab-cbba22dde584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15300", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqbfirxvof2v", "content": "CVE-2026-15300 - geo my wp\nA security issue in GEO my WP plugin for WordPress could allow an attacker to access sensitive data without a password. This affects versions 4.5.4 and earlier. To protect your site, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ninjew #CVE #infosec", "creation_timestamp": "2026-07-10T05:18:05.315377Z"}, {"uuid": "f0c2f798-e7ed-4c0e-8c92-fb43114bdc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15300", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116894153133982870", "content": "SQL Injection vuln (CRITICAL, CVE-2026-15300) in GEO my WP <=4.5.4 lets attackers exploit 'distance', 'lat', 'lng' via query string. Upgrade to 4.5.5 for numeric validation & input casting. https://radar.offseq.com/threat/cve-2026-15300-cwe-89-improper-neutralization-of-s-9618cb6f0d2ba913 #OffSeq #WordPress #Security #CVE202615300", "creation_timestamp": "2026-07-10T06:00:26.125870Z"}, {"uuid": "28d403b6-3423-420d-b4ca-aa74e9ee403f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15300", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqbhuket422f", "content": "CRITICAL SQL Injection (CVE-2026-15300) impacts GEO my WP <=4.5.4. Exploit via 'distance', 'lat', 'lng' params allows SQL command execution. Upgrade to 4.5.5 now. \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-15300-cwe-89-improper-neutralization-of-s-9618cb6f0d2ba913 #OffSeq #WordPress", "creation_timestamp": "2026-07-10T06:00:28.113041Z"}, {"uuid": "be45d867-88e5-48fd-a4c1-fc11aa70e281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccotjtnp2u", "content": "\ud83d\udd17 CVE : CVE-2026-15308", "creation_timestamp": "2026-07-10T14:00:26.469973Z"}, {"uuid": "2cfeda6d-def9-4dbd-9543-6538eb3421ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15301", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhctfuzp2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15301 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 BuddyHolis TableSearch \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9F48B0FA-DFD9-491D-83C9-3098BB56E5CF", "creation_timestamp": "2026-07-11T00:55:52.846933Z"}, {"uuid": "ca98add4-71f4-4447-ae07-1ab3f74a37a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15301", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqdhcuf6pi2k", "content": "WordPress\u63d2\u4ef6\u6f0f\u6d1e\u8b66\u544a:BuddyHolis TableSearch\u63d2\u4ef6\u5b58\u5728\u5b58\u50a8\u578bXSS\u6f0f\u6d1e(CVE-2026-15301)\n\n\n\nhttps://qian.cx/posts/BBA35708-A9A3-4DDE-94DC-7A6C06ECDDEA", "creation_timestamp": "2026-07-11T00:55:53.623829Z"}, {"uuid": "c11fa668-0c69-4e84-b504-b5795b82afb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15300", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqdv3lnbzi22", "content": "Daily IT Security Digest \u2014 2026-07-11\nbugs in Ozone and Views components. Memory corruption flaws in Chrome can lead to remote code execution, making prompt updates essential. [Source: offseq@infosec.exchange]\n\n7. **GEO my WP SQL Injection (CVE-2026-15300, CVSS 8.7)** \u2014 A critical SQL injection", "creation_timestamp": "2026-07-11T05:02:21.569207Z"}, {"uuid": "da77d46f-2abb-48ec-80b9-01050d495325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqdypeurco2n", "content": "\ud83d\udccc CVE-2026-15308 - The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessin... https://www.cyberhub.blog/cves/CVE-2026-15308", "creation_timestamp": "2026-07-11T06:07:07.051735Z"}, {"uuid": "282a627f-5994-4dc2-b0df-8ecd9a80937b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqgwc5a2in24", "content": "CVE-2026-15308: Lack of Evidence Raises Doubts on HTMLParser DoS Risk #CVE2026 #Cybersecurity #HTMLParser", "creation_timestamp": "2026-07-12T10:01:55.154628Z"}, {"uuid": "e474d2fd-2c6f-4155-857e-215573260680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqgwbpvwqv24", "content": "CVE-2026-15308: Incremental HTMLParser Vulnerability Will Lead to CPU Exhaustion #CVE2026 #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-12T10:01:41.025779Z"}, {"uuid": "61b5de4c-8441-4c88-8e5b-199b28d9ca37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqgwbtfwrr2j", "content": "CVE-2026-15308 Enables CPU-Exhaustion DoS Attacks on Systems Using Incremental HTMLParser #CVE2026 #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-12T10:01:44.913737Z"}, {"uuid": "300ba75f-9c1f-4d51-b70d-1eab3364db6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqgwbwoeeg25", "content": "CVE-2026-15308: CPU Exhaustion Vulnerability Signals Broader HTMLParser Risks #CVE2026 #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-12T10:01:48.018216Z"}, {"uuid": "8a19a21a-f20f-46db-862e-615cc704e7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqgwbzjwjl22", "content": "CVE-2026-15308: Denial-of-Service Vulnerability Poses Management Risks #CyberSecurity #Vulnerability #DenialOfService", "creation_timestamp": "2026-07-12T10:01:51.131703Z"}, {"uuid": "9e2b35fb-ce15-4cd6-8f19-f9920d956f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15308", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqgwcavqwi2d", "content": "CVE-2026-15308: DoS Risk Management or Overblown Panic? #CVE2026 #CyberSecurity #VulnerabilityManagement", "creation_timestamp": "2026-07-12T10:01:58.535134Z"}, {"uuid": "a844a36a-8a21-4cfc-8669-0e96538a95f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15300", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhr3ilbve2i", "content": "\ud83d\udd34 CVE-2026-15300 - Critical (9.1)\n\nThe GEO my WP plugin for WordPress was vulnerable to SQL Injection via the 'distance', 'lat', and...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15300/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-12T18:01:23.066639Z"}, {"uuid": "0e4b2c1b-3d56-46fe-a560-6fa001309b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqdhqwci2a", "content": "CVE-2026-15306 - Product Feed Manager For WooCommerce\nCVE ID : CVE-2026-15306\n \n Published : July 16, 2026, 5:16 a.m. | 2\u00a0hours, 18\u00a0minutes ago\n \n Description : The Product Feed Manager For WooCommerce \u2013 Sell on 200+ Online Marketplaces plugin for WordPress is vulnerable to Re...", "creation_timestamp": "2026-07-16T07:41:53.891346Z"}, {"uuid": "bdcaff26-fa93-4995-a0dc-4cc76b5768f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15305", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5grm6cjl2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15305 \u0432 TYPO3 CMS: \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 Form Framework\n\n\n\nhttps://kripta.biz/posts/09732D70-410C-4A0E-B7AB-0ED1194BF460", "creation_timestamp": "2026-07-21T08:55:27.550197Z"}]}